last executing test programs: 11.249781065s ago: executing program 0 (id=124): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x4}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x7, 0x4, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@end]}}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x244) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 9.952394586s ago: executing program 1 (id=130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x60, 0x1, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) 8.870480679s ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x79) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x100000}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) recvfrom$unix(r3, &(0x7f0000000700)=""/102, 0x66, 0x20c0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r9 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00ffdb250000000020", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x200, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x43, 0x2}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 8.252467903s ago: executing program 1 (id=132): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2817\x00', [0x9e0, 0x2566, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xf, 0x1, 0x5, 0x344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0x8000a, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000380)={0xc000003, 0xf, &(0x7f0000000080)=[0x83, 0xffffffff, 0x4, 0x204, 0x660, 0xfffbfff9, 0x7, 0xfffffff7, 0x8, 0x9, 0xffffffff, 0x42, 0x9, 0x4, 0x6], 0x0, 0x1}) 8.167133787s ago: executing program 1 (id=133): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) close(0x4) 7.211149275s ago: executing program 1 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x70bd2d, 0x0, {0x7a, 0x0, 0x0, r4, 0xd84e2d4e0a85ad5b}}, 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @random="00006a9ce7f3", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) 6.81064981s ago: executing program 1 (id=135): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x9, 0xe4b, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x6, [0x200, 0x7ff]}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4800}, 0x24020000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x40}}, 0x8080) 1.819786228s ago: executing program 0 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x79) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x100000}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) recvfrom$unix(r3, &(0x7f0000000700)=""/102, 0x66, 0x20c0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r9 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00ffdb250000000020", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x200, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x43, 0x2}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 1.381031495s ago: executing program 0 (id=137): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd38, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.239858181s ago: executing program 0 (id=138): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000e00)={@mcast1}, 0x14) 1.160258664s ago: executing program 0 (id=139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 0s ago: executing program 0 (id=140): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x7fffffff, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x6, 0x5, 0x7ff, 0x830, 0x8, 0x10000, 0x9, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x3, 0x4, 0xa, 0x70f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0x4, 0xb, 0x65f, 0xfffffff9, 0xe0, 0xffff7ff7, 0x9, 0xf5, 0xffffffbf, 0x2, 0x8000200, 0x4, 0x6], 0x0, 0x4}) kernel console output (not intermixed with test programs): [ 47.504363][ T31] audit: type=1400 audit(47.440:56): avc: denied { read write } for pid=3113 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.506098][ T31] audit: type=1400 audit(47.440:57): avc: denied { open } for pid=3113 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:7882' (ED25519) to the list of known hosts. [ 60.640940][ T31] audit: type=1400 audit(60.570:58): avc: denied { name_bind } for pid=3116 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.025253][ T31] audit: type=1400 audit(61.960:59): avc: denied { execute } for pid=3117 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.027107][ T31] audit: type=1400 audit(61.960:60): avc: denied { execute_no_trans } for pid=3117 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.749835][ T31] audit: type=1400 audit(64.680:61): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.753028][ T31] audit: type=1400 audit(64.690:62): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.766783][ T3117] cgroup: Unknown subsys name 'net' [ 64.774644][ T31] audit: type=1400 audit(64.710:63): avc: denied { unmount } for pid=3117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.894919][ T3117] cgroup: Unknown subsys name 'cpuset' [ 64.899716][ T3117] cgroup: Unknown subsys name 'hugetlb' [ 64.900970][ T3117] cgroup: Unknown subsys name 'rlimit' [ 65.155641][ T31] audit: type=1400 audit(65.090:64): avc: denied { setattr } for pid=3117 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.158207][ T31] audit: type=1400 audit(65.090:65): avc: denied { mounton } for pid=3117 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.162439][ T31] audit: type=1400 audit(65.090:66): avc: denied { mount } for pid=3117 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.287171][ T3119] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.289427][ T31] audit: type=1400 audit(65.220:67): avc: denied { relabelto } for pid=3119 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 71.609557][ T3117] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.535129][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 73.541141][ T31] audit: type=1400 audit(73.470:71): avc: denied { execmem } for pid=3120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.598387][ T31] audit: type=1400 audit(73.530:72): avc: denied { read } for pid=3122 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.611023][ T31] audit: type=1400 audit(73.540:73): avc: denied { open } for pid=3122 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.611369][ T31] audit: type=1400 audit(73.540:74): avc: denied { mounton } for pid=3122 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.639129][ T31] audit: type=1400 audit(73.570:75): avc: denied { module_request } for pid=3123 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.642021][ T31] audit: type=1400 audit(73.570:76): avc: denied { module_request } for pid=3122 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.713736][ T31] audit: type=1400 audit(73.650:77): avc: denied { sys_module } for pid=3123 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.397151][ T31] audit: type=1400 audit(74.330:78): avc: denied { ioctl } for pid=3123 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.489857][ T3123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.496706][ T3123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.639983][ T3122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.648439][ T3122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.451301][ T3123] hsr_slave_0: entered promiscuous mode [ 76.454864][ T3123] hsr_slave_1: entered promiscuous mode [ 76.568216][ T3122] hsr_slave_0: entered promiscuous mode [ 76.570038][ T3122] hsr_slave_1: entered promiscuous mode [ 76.572899][ T3122] debugfs: 'hsr0' already exists in 'hsr' [ 76.573427][ T3122] Cannot create hsr debugfs directory [ 76.925312][ T31] audit: type=1400 audit(76.860:79): avc: denied { create } for pid=3123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.931632][ T31] audit: type=1400 audit(76.860:80): avc: denied { write } for pid=3123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.935670][ T3123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.951603][ T3123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.966795][ T3123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.972370][ T3123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.007230][ T3122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.013460][ T3122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.017459][ T3122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.027925][ T3122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.464157][ T3122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.566265][ T3123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.952118][ T3123] veth0_vlan: entered promiscuous mode [ 79.964298][ T3123] veth1_vlan: entered promiscuous mode [ 80.019112][ T3123] veth0_macvtap: entered promiscuous mode [ 80.026788][ T3123] veth1_macvtap: entered promiscuous mode [ 80.095004][ T2974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.096792][ T2974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.098929][ T2974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.099998][ T2974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234952][ T3122] veth0_vlan: entered promiscuous mode [ 80.259784][ T3122] veth1_vlan: entered promiscuous mode [ 80.271295][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 80.272315][ T31] audit: type=1400 audit(80.200:82): avc: denied { mount } for pid=3123 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.283846][ T31] audit: type=1400 audit(80.220:83): avc: denied { mounton } for pid=3123 comm="syz-executor" path="/syzkaller.wsoz4W/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.289108][ T31] audit: type=1400 audit(80.220:84): avc: denied { mount } for pid=3123 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.301274][ T31] audit: type=1400 audit(80.230:85): avc: denied { mounton } for pid=3123 comm="syz-executor" path="/syzkaller.wsoz4W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.308775][ T31] audit: type=1400 audit(80.240:86): avc: denied { mounton } for pid=3123 comm="syz-executor" path="/syzkaller.wsoz4W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 80.334633][ T31] audit: type=1400 audit(80.270:87): avc: denied { unmount } for pid=3123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.339740][ T31] audit: type=1400 audit(80.270:88): avc: denied { mounton } for pid=3123 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.345024][ T3122] veth0_macvtap: entered promiscuous mode [ 80.348052][ T31] audit: type=1400 audit(80.280:89): avc: denied { mount } for pid=3123 comm="syz-executor" name="/" dev="gadgetfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.359460][ T31] audit: type=1400 audit(80.290:90): avc: denied { mount } for pid=3123 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.366948][ T31] audit: type=1400 audit(80.290:91): avc: denied { mounton } for pid=3123 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 80.369254][ T3122] veth1_macvtap: entered promiscuous mode [ 80.458381][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.459055][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.459187][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.459249][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.477513][ T3123] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.572928][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'. [ 81.599629][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4'. [ 90.361727][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 90.362026][ T31] audit: type=1400 audit(90.290:100): avc: denied { prog_run } for pid=3832 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.621598][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.811480][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 90.845145][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 90.846178][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.860013][ T9] usb 2-1: config 0 descriptor?? [ 90.882662][ T9] usb 2-1: selecting invalid altsetting 3 [ 90.893936][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 90.894441][ T9] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 90.904671][ T9] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 90.933238][ T31] audit: type=1400 audit(90.870:101): avc: denied { unmount } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.078356][ T3813] usb 2-1: USB disconnect, device number 2 [ 91.510796][ T3813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.671157][ T3813] usb 2-1: Using ep0 maxpacket: 16 [ 91.706467][ T3813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.706814][ T3813] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.707206][ T3813] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 91.707266][ T3813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.717736][ T3813] usb 2-1: config 0 descriptor?? [ 101.992465][ T9] usb 2-1: USB disconnect, device number 3 [ 102.380871][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.530930][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 102.537311][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.537632][ T9] usb 2-1: config 0 has no interface number 0 [ 102.537960][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.538117][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 102.538159][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.548246][ T9] usb 2-1: config 0 descriptor?? [ 102.555688][ T9] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 103.507036][ T31] audit: type=1400 audit(103.440:102): avc: denied { create } for pid=3883 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.481418][ T2909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.630807][ T2909] usb 1-1: Using ep0 maxpacket: 16 [ 108.640707][ T2909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.640937][ T2909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.641024][ T2909] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 108.641059][ T2909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.689230][ T2909] usb 1-1: config 0 descriptor?? [ 112.773414][ T9] usb 2-1: USB disconnect, device number 4 [ 113.161277][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.311248][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 113.322710][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.323005][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.323336][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.323586][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 113.323746][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.331350][ T9] usb 2-1: config 0 descriptor?? [ 113.791273][ T9] hid (null): report_id 3323596431 is invalid [ 113.791663][ T9] hid (null): unknown global tag 0xe [ 113.795669][ T9] hid (null): unknown global tag 0xe [ 113.796167][ T9] hid (null): unknown global tag 0xe [ 113.797160][ T9] hid (null): unknown global tag 0x63 [ 113.798215][ T9] hid (null): unknown global tag 0xd [ 113.964614][ T82] usb 2-1: USB disconnect, device number 5 [ 114.587314][ T31] audit: type=1400 audit(114.520:103): avc: denied { map_create } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.595198][ T31] audit: type=1400 audit(114.530:104): avc: denied { map_read map_write } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.628308][ T31] audit: type=1400 audit(114.560:105): avc: denied { validate_trans } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.633520][ T31] audit: type=1400 audit(114.570:106): avc: denied { create } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.638873][ T31] audit: type=1400 audit(114.570:107): avc: denied { create } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.645292][ T31] audit: type=1400 audit(114.580:108): avc: denied { bind } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.655197][ T31] audit: type=1400 audit(114.590:109): avc: denied { write } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.753331][ T31] audit: type=1400 audit(114.690:110): avc: denied { write } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.973547][ T31] audit: type=1400 audit(114.910:111): avc: denied { write } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.976663][ T31] audit: type=1400 audit(114.910:112): avc: denied { nlmsg_write } for pid=3927 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.871147][ T82] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.021320][ T82] usb 2-1: Using ep0 maxpacket: 32 [ 116.029281][ T82] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.029599][ T82] usb 2-1: config 0 has no interface number 0 [ 116.029779][ T82] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.029981][ T82] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 116.030039][ T82] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.036162][ T82] usb 2-1: config 0 descriptor?? [ 116.046497][ T82] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 118.935050][ T2909] usb 1-1: USB disconnect, device number 2 [ 119.331325][ T2909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.481336][ T2909] usb 1-1: Using ep0 maxpacket: 32 [ 119.495941][ T2909] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 119.497498][ T2909] usb 1-1: config 0 has no interface number 0 [ 119.498471][ T2909] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.499645][ T2909] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.502790][ T2909] usb 1-1: config 0 interface 85 has no altsetting 0 [ 119.517444][ T2909] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 119.518760][ T2909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.519805][ T2909] usb 1-1: Product: syz [ 119.522733][ T2909] usb 1-1: Manufacturer: syz [ 119.523143][ T2909] usb 1-1: SerialNumber: syz [ 119.528512][ T2909] usb 1-1: config 0 descriptor?? [ 119.744163][ T2909] appletouch 1-1:0.85: Failed to read mode from device. [ 119.745621][ T2909] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 119.764941][ T2909] usb 1-1: USB disconnect, device number 3 [ 122.436719][ T31] audit: type=1400 audit(122.370:113): avc: denied { unmount } for pid=3122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 123.141474][ T2909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.290893][ T2909] usb 1-1: Using ep0 maxpacket: 16 [ 123.297045][ T2909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.298302][ T2909] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 123.300104][ T2909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.305834][ T2909] usb 1-1: config 0 descriptor?? [ 126.258447][ T9] usb 2-1: USB disconnect, device number 6 [ 127.261481][ T82] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.424937][ T82] usb 2-1: Using ep0 maxpacket: 32 [ 127.442932][ T82] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.454815][ T82] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 127.455093][ T82] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.455387][ T82] usb 2-1: Product: syz [ 127.455470][ T82] usb 2-1: Manufacturer: syz [ 127.455503][ T82] usb 2-1: SerialNumber: syz [ 127.462305][ T82] usb 2-1: config 0 descriptor?? [ 127.880920][ T82] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 128.287073][ T82] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 128.305302][ T82] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 128.364118][ T82] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 128.383193][ T82] usb 2-1: USB disconnect, device number 7 [ 128.911375][ T82] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.060681][ T82] usb 2-1: Using ep0 maxpacket: 32 [ 129.069627][ T82] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.072353][ T82] usb 2-1: config 0 has no interface number 0 [ 129.075409][ T82] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.081280][ T82] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.087367][ T82] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 129.088565][ T82] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.094568][ T82] usb 2-1: config 0 descriptor?? [ 129.521041][ T82] usbhid 2-1:0.1: can't add hid device: -71 [ 129.522842][ T82] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 129.530217][ T82] usb 2-1: USB disconnect, device number 8 [ 130.831134][ T82] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.986901][ T82] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 130.988205][ T82] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 130.989562][ T82] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 130.991543][ T82] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.996597][ T82] usb 2-1: config 0 descriptor?? [ 131.422207][ T82] uclogic 0003:5543:0042.0002: unknown main item tag 0x0 [ 131.424610][ T82] uclogic 0003:5543:0042.0002: unknown main item tag 0x0 [ 131.429826][ T82] uclogic 0003:5543:0042.0002: hidraw0: USB HID v0.04 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 131.616771][ T3814] usb 2-1: USB disconnect, device number 9 [ 133.522320][ T9] usb 1-1: USB disconnect, device number 4 [ 134.024110][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 134.024456][ T4194] netlink: 'syz.0.41': attribute type 5 has an invalid length. [ 134.025704][ T4194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 134.038763][ T4194] geneve2: entered promiscuous mode [ 134.039055][ T4194] geneve2: entered allmulticast mode [ 134.049466][ T2974] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 134.049896][ T2974] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 134.051042][ T2974] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 134.051272][ T2974] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 135.642663][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.811979][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 135.826622][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.826903][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 135.827151][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.832733][ T9] usb 1-1: config 0 descriptor?? [ 140.202489][ T31] audit: type=1400 audit(140.140:114): avc: denied { mounton } for pid=4234 comm="syz.1.46" path="/24/file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.827976][ T31] audit: type=1400 audit(142.760:115): avc: denied { create } for pid=4240 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.832125][ T31] audit: type=1400 audit(142.770:116): avc: denied { bind } for pid=4240 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 143.000826][ T31] audit: type=1400 audit(142.930:117): avc: denied { setopt } for pid=4240 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 143.004429][ T31] audit: type=1400 audit(142.940:118): avc: denied { accept } for pid=4240 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.071992][ T2909] usb 1-1: USB disconnect, device number 5 [ 148.181398][ T2909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.360822][ T2909] usb 1-1: Using ep0 maxpacket: 16 [ 148.397737][ T2909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.398054][ T2909] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 148.398353][ T2909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.418407][ T2909] usb 1-1: config 0 descriptor?? [ 158.378041][ T31] audit: type=1400 audit(158.310:119): avc: denied { mounton } for pid=4291 comm="syz.1.53" path="/26/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 158.393675][ T31] audit: type=1400 audit(158.330:120): avc: denied { allowed } for pid=4291 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.405550][ T31] audit: type=1400 audit(158.340:121): avc: denied { create } for pid=4291 comm="syz.1.53" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.410997][ T31] audit: type=1400 audit(158.340:122): avc: denied { map } for pid=4291 comm="syz.1.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.411372][ T31] audit: type=1400 audit(158.350:123): avc: denied { read write } for pid=4291 comm="syz.1.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.788951][ T31] audit: type=1400 audit(158.720:124): avc: denied { create } for pid=4301 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.816361][ T31] audit: type=1400 audit(158.750:125): avc: denied { getopt } for pid=4301 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.193007][ T3814] usb 1-1: USB disconnect, device number 6 [ 159.500804][ T3814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.660097][ T3814] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 159.661004][ T3814] usb 1-1: config 1 has no interface number 0 [ 159.661289][ T3814] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 159.661507][ T3814] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 159.661749][ T3814] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.680758][ T3814] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 159.681007][ T3814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.681237][ T3814] usb 1-1: Product: syz [ 159.681393][ T3814] usb 1-1: Manufacturer: syz [ 159.681438][ T3814] usb 1-1: SerialNumber: syz [ 159.702934][ T4314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.933842][ T4314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.027693][ T4336] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 160.203659][ T3814] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 160.610507][ T3814] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 160.613137][ T3814] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 160.677074][ T3814] usb 1-1: USB disconnect, device number 7 [ 160.678490][ T3814] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 160.741515][ T3814] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 161.030977][ T31] audit: type=1400 audit(160.960:126): avc: denied { connect } for pid=4359 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.031284][ T31] audit: type=1400 audit(160.960:127): avc: denied { setopt } for pid=4359 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.807582][ T4389] syzkaller0: entered promiscuous mode [ 162.810956][ T4389] syzkaller0: entered allmulticast mode [ 163.451694][ T107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.692582][ T107] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 163.693605][ T107] usb 1-1: config 1 has no interface number 0 [ 163.695960][ T107] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 163.698043][ T107] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 163.702951][ T107] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.756325][ T107] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 163.760943][ T107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.761271][ T107] usb 1-1: Product: syz [ 163.761431][ T107] usb 1-1: Manufacturer: syz [ 163.761585][ T107] usb 1-1: SerialNumber: syz [ 163.774314][ T4398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.997730][ T4398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.238889][ T107] usb 1-1: Incompatible driver and firmware versions [ 164.247523][ T107] usb 1-1: USB disconnect, device number 8 [ 167.300974][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.451030][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 167.461990][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.475829][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 167.476123][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.476399][ T9] usb 1-1: Product: syz [ 167.476479][ T9] usb 1-1: Manufacturer: syz [ 167.478103][ T9] usb 1-1: SerialNumber: syz [ 167.482317][ T9] usb 1-1: config 0 descriptor?? [ 167.497317][ T9] gs_usb 1-1:0.0: Required endpoints not found [ 176.191830][ T2909] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.340847][ T2909] usb 2-1: Using ep0 maxpacket: 32 [ 176.347521][ T2909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.348047][ T2909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.348517][ T2909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 176.348579][ T2909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.358014][ T2909] usb 2-1: config 0 descriptor?? [ 176.783397][ T2909] koneplus 0003:1E7D:2D51.0003: item fetching failed at offset 1/5 [ 176.784153][ T2909] koneplus 0003:1E7D:2D51.0003: parse failed [ 176.787701][ T2909] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -22 [ 176.981519][ T107] usb 2-1: USB disconnect, device number 10 [ 177.738820][ T2909] usb 1-1: USB disconnect, device number 9 [ 177.878481][ T4552] netlink: 'syz.1.81': attribute type 30 has an invalid length. [ 180.670733][ T107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.820689][ T107] usb 1-1: Using ep0 maxpacket: 32 [ 180.839499][ T107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.844655][ T4588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 180.862499][ T107] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 180.862770][ T107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.862982][ T107] usb 1-1: Product: syz [ 180.863133][ T107] usb 1-1: Manufacturer: syz [ 180.863281][ T107] usb 1-1: SerialNumber: syz [ 180.873350][ T107] usb 1-1: config 0 descriptor?? [ 180.886911][ T107] gs_usb 1-1:0.0: Required endpoints not found [ 186.535237][ T31] audit: type=1400 audit(186.470:128): avc: denied { ioctl } for pid=4625 comm="syz.1.89" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3741 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.781190][ T107] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.941397][ T107] usb 2-1: Using ep0 maxpacket: 16 [ 186.953049][ T107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.953350][ T107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.953606][ T107] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.953789][ T107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.961372][ T107] usb 2-1: config 0 descriptor?? [ 187.388504][ T107] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 187.389767][ T107] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 187.391619][ T107] mcp2221 0003:04D8:00DD.0004: item fetching failed at offset 2/5 [ 187.392923][ T107] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 187.393981][ T107] mcp2221 0003:04D8:00DD.0004: probe with driver mcp2221 failed with error -22 [ 187.587902][ T11] usb 2-1: USB disconnect, device number 11 [ 188.193000][ T31] audit: type=1400 audit(188.130:129): avc: denied { write } for pid=4643 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.224872][ T31] audit: type=1400 audit(190.160:130): avc: denied { sqpoll } for pid=4646 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.108450][ T9] usb 1-1: USB disconnect, device number 10 [ 191.879671][ T31] audit: type=1400 audit(191.810:131): avc: denied { append } for pid=4696 comm="syz.0.96" name="comedi3" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.899534][ T4697] comedi: valid board names for 8255 driver are: [ 191.899816][ T4697] 8255 [ 191.900051][ T4697] comedi: valid board names for vmk80xx driver are: [ 191.900132][ T4697] vmk80xx [ 191.900148][ T4697] comedi: valid board names for usbduxsigma driver are: [ 191.900165][ T4697] usbduxsigma [ 191.900178][ T4697] comedi: valid board names for usbduxfast driver are: [ 191.902928][ T4697] usbduxfast [ 191.903166][ T4697] comedi: valid board names for usbdux driver are: [ 191.903380][ T4697] usbdux [ 191.903409][ T4697] comedi: valid board names for ni6501 driver are: [ 191.903423][ T4697] ni6501 [ 191.903494][ T4697] comedi: valid board names for dt9812 driver are: [ 191.903512][ T4697] dt9812 [ 191.903525][ T4697] comedi: valid board names for ni_labpc_cs driver are: [ 191.903541][ T4697] ni_labpc_cs [ 191.903553][ T4697] comedi: valid board names for ni_daq_700 driver are: [ 191.903697][ T4697] ni_daq_700 [ 191.903717][ T4697] comedi: valid board names for labpc_pci driver are: [ 191.903793][ T4697] labpc_pci [ 191.903813][ T4697] comedi: valid board names for adl_pci9118 driver are: [ 191.903845][ T4697] pci9118dg [ 191.904059][ T4697] pci9118hg [ 191.904119][ T4697] pci9118hr [ 191.904136][ T4697] comedi: valid board names for 8255_pci driver are: [ 191.904154][ T4697] 8255_pci [ 191.904167][ T4697] comedi: valid board names for comedi_parport driver are: [ 191.904180][ T4697] comedi_parport [ 191.904208][ T4697] comedi: valid board names for comedi_test driver are: [ 191.904387][ T4697] comedi_test [ 191.904407][ T4697] comedi: valid board names for comedi_bond driver are: [ 191.904422][ T4697] comedi_bond [ 192.221051][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.371650][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 192.383093][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.411651][ T11] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 192.411935][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.412224][ T11] usb 1-1: Product: syz [ 192.412600][ T11] usb 1-1: Manufacturer: syz [ 192.412747][ T11] usb 1-1: SerialNumber: syz [ 192.422784][ T11] usb 1-1: config 0 descriptor?? [ 192.449852][ T11] gs_usb 1-1:0.0: Required endpoints not found [ 202.669328][ T9] usb 1-1: USB disconnect, device number 11 [ 202.934412][ T31] audit: type=1400 audit(202.870:132): avc: denied { create } for pid=4746 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.953975][ T31] audit: type=1400 audit(202.890:133): avc: denied { ioctl } for pid=4746 comm="syz.0.101" path="socket:[2933]" dev="sockfs" ino=2933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.311022][ T98] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.481463][ T98] usb 2-1: Using ep0 maxpacket: 32 [ 203.488938][ T98] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 203.489239][ T98] usb 2-1: config 0 has no interface number 0 [ 203.489414][ T98] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.489585][ T98] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.489750][ T98] usb 2-1: config 0 interface 85 has no altsetting 0 [ 203.506029][ T98] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 203.506965][ T98] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.507137][ T98] usb 2-1: Product: syz [ 203.507186][ T98] usb 2-1: Manufacturer: syz [ 203.507213][ T98] usb 2-1: SerialNumber: syz [ 203.511501][ T98] usb 2-1: config 0 descriptor?? [ 203.727679][ T98] appletouch 2-1:0.85: Failed to read mode from device. [ 203.727936][ T98] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 203.943950][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 203.953525][ T98] usb 2-1: USB disconnect, device number 12 [ 204.311375][ T98] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.471534][ T98] usb 2-1: Using ep0 maxpacket: 32 [ 204.478956][ T98] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.495053][ T98] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 204.495331][ T98] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.495575][ T98] usb 2-1: Product: syz [ 204.495727][ T98] usb 2-1: Manufacturer: syz [ 204.495773][ T98] usb 2-1: SerialNumber: syz [ 204.502539][ T98] usb 2-1: config 0 descriptor?? [ 204.510862][ T98] gs_usb 2-1:0.0: Required endpoints not found [ 206.831664][ T2909] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 207.038990][ T2909] usb 1-1: Using ep0 maxpacket: 32 [ 207.078782][ T2909] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 207.081559][ T2909] usb 1-1: config 0 has no interface number 0 [ 207.096839][ T2909] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.101658][ T2909] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.101922][ T2909] usb 1-1: config 0 interface 85 has no altsetting 0 [ 207.124877][ T2909] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 207.125756][ T2909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.129214][ T2909] usb 1-1: Product: syz [ 207.141527][ T2909] usb 1-1: Manufacturer: syz [ 207.142244][ T2909] usb 1-1: SerialNumber: syz [ 207.157279][ T2909] usb 1-1: config 0 descriptor?? [ 207.647243][ T2909] appletouch 1-1:0.85: Geyser mode initialized. [ 207.664652][ T2909] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 207.852314][ T82] usb 1-1: USB disconnect, device number 12 [ 207.879269][ T82] appletouch 1-1:0.85: input: appletouch disconnected [ 208.346165][ T2909] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 208.551055][ T2909] usb 1-1: Using ep0 maxpacket: 32 [ 208.559971][ T2909] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.586855][ T2909] usb 1-1: config 0 has no interface number 0 [ 208.599604][ T2909] usb 1-1: config 0 interface 2 has no altsetting 0 [ 208.627685][ T2909] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 208.631091][ T2909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.631637][ T2909] usb 1-1: Product: syz [ 208.632581][ T2909] usb 1-1: Manufacturer: syz [ 208.633321][ T2909] usb 1-1: SerialNumber: syz [ 208.645100][ T2909] usb 1-1: config 0 descriptor?? [ 208.904127][ T2909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.055582][ T2909] usb 1-1: USB disconnect, device number 13 [ 212.712885][ T4839] could not allocate digest TFM handle xxhash64-generic [ 214.736297][ T2909] usb 2-1: USB disconnect, device number 13 [ 218.771173][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 218.939645][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 218.941489][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.949937][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 218.953118][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 218.954833][ T9] usb 1-1: Manufacturer: syz [ 218.959486][ T9] usb 1-1: config 0 descriptor?? [ 219.081430][ T9] rc_core: IR keymap rc-hauppauge not found [ 219.083004][ T9] Registered IR keymap rc-empty [ 219.088562][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 219.094610][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 219.179932][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 219.217779][ T9] usb 1-1: USB disconnect, device number 14 [ 221.940803][ T3813] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 222.110125][ T3813] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.110876][ T3813] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 222.111162][ T3813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.111426][ T3813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 222.128347][ T3813] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.128596][ T3813] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.128747][ T3813] usb 1-1: Product: syz [ 222.128787][ T3813] usb 1-1: Manufacturer: syz [ 222.153526][ T3813] cdc_wdm 1-1:1.0: skipping garbage [ 222.153826][ T3813] cdc_wdm 1-1:1.0: skipping garbage [ 222.166981][ T3813] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 222.364418][ T3813] usb 1-1: USB disconnect, device number 15 [ 222.865548][ T31] audit: type=1400 audit(222.800:134): avc: denied { create } for pid=4967 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.869013][ T31] audit: type=1400 audit(222.800:135): avc: denied { ioctl } for pid=4967 comm="syz.1.125" path="socket:[3993]" dev="sockfs" ino=3993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.081328][ T31] audit: type=1400 audit(223.020:136): avc: denied { write } for pid=4967 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.443796][ T31] audit: type=1400 audit(223.380:137): avc: denied { bind } for pid=4995 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.460877][ T31] audit: type=1400 audit(223.390:138): avc: denied { name_bind } for pid=4995 comm="syz.1.127" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 223.464279][ T31] audit: type=1400 audit(223.400:139): avc: denied { node_bind } for pid=4995 comm="syz.1.127" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 224.081467][ T2909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 224.230893][ T2909] usb 2-1: Using ep0 maxpacket: 8 [ 224.237114][ T2909] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 224.237986][ T2909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.242595][ T2909] usb 2-1: config 0 descriptor?? [ 224.671337][ T2909] magicmouse 0003:05AC:0324.0005: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 224.873426][ T2909] usb 2-1: USB disconnect, device number 14 [ 225.547934][ T5054] comedi: valid board names for 8255 driver are: [ 225.548999][ T5054] 8255 [ 225.549672][ T5054] comedi: valid board names for vmk80xx driver are: [ 225.551688][ T5054] vmk80xx [ 225.552293][ T5054] comedi: valid board names for usbduxsigma driver are: [ 225.552893][ T5054] usbduxsigma [ 225.553342][ T5054] comedi: valid board names for usbduxfast driver are: [ 225.554018][ T5054] usbduxfast [ 225.555571][ T5054] comedi: valid board names for usbdux driver are: [ 225.556004][ T5054] usbdux [ 225.559583][ T5054] comedi: valid board names for ni6501 driver are: [ 225.560636][ T5054] ni6501 [ 225.561015][ T5054] comedi: valid board names for dt9812 driver are: [ 225.561427][ T5054] dt9812 [ 225.562206][ T5054] comedi: valid board names for ni_labpc_cs driver are: [ 225.562630][ T5054] ni_labpc_cs [ 225.562937][ T5054] comedi: valid board names for ni_daq_700 driver are: [ 225.563362][ T5054] ni_daq_700 [ 225.563674][ T5054] comedi: valid board names for labpc_pci driver are: [ 225.564051][ T5054] labpc_pci [ 225.564407][ T5054] comedi: valid board names for adl_pci9118 driver are: [ 225.564782][ T5054] pci9118dg [ 225.565075][ T5054] pci9118hg [ 225.565367][ T5054] pci9118hr [ 225.565650][ T5054] comedi: valid board names for 8255_pci driver are: [ 225.566025][ T5054] 8255_pci [ 225.566316][ T5054] comedi: valid board names for comedi_parport driver are: [ 225.566689][ T5054] comedi_parport [ 225.566994][ T5054] comedi: valid board names for comedi_test driver are: [ 225.567397][ T5054] comedi_test [ 225.567712][ T5054] comedi: valid board names for comedi_bond driver are: [ 225.568120][ T5054] comedi_bond [ 225.900906][ T82] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 226.068162][ T82] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.068437][ T82] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.068709][ T82] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.068781][ T82] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.084163][ T5056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.096245][ T82] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.515268][ T82] usb 2-1: USB disconnect, device number 15 [ 229.395605][ T31] audit: type=1400 audit(229.330:140): avc: denied { read } for pid=5092 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.569396][ T5133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 232.580940][ T31] audit: type=1400 audit(232.510:141): avc: denied { connect } for pid=5132 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.581306][ T31] audit: type=1400 audit(232.510:142): avc: denied { setopt } for pid=5132 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.900991][ T2909] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 233.051234][ T2909] usb 1-1: Using ep0 maxpacket: 16 [ 233.062805][ T2909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.063977][ T2909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.064741][ T2909] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 233.065390][ T2909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.070151][ T2909] usb 1-1: config 0 descriptor?? [ 233.516332][ T2909] uclogic 0003:5543:0005.0006: unknown main item tag 0x0 [ 233.518609][ T2909] uclogic 0003:5543:0005.0006: unknown main item tag 0x0 [ 233.519577][ T2909] uclogic 0003:5543:0005.0006: unknown main item tag 0x0 [ 233.523356][ T2909] uclogic 0003:5543:0005.0006: unknown main item tag 0x0 [ 233.525263][ T2909] uclogic 0003:5543:0005.0006: unknown main item tag 0x0 [ 233.528317][ T2909] uclogic 0003:5543:0005.0006: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 233.718114][ T2909] usb 1-1: USB disconnect, device number 16 [ 233.820038][ T5157] 8<--- cut here --- [ 233.820310][ T5157] Unable to handle kernel paging request at virtual address fee02f00 when write [ 233.820544][ T5157] [fee02f00] *pgd=80000080007003, *pmd=00000000 [ 233.822257][ T5157] Internal error: Oops: a06 [#1] SMP ARM [ 233.826744][ T5157] Modules linked in: [ 233.828331][ T5157] CPU: 1 UID: 0 PID: 5157 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT [ 233.829457][ T5157] Hardware name: ARM-Versatile Express [ 233.832417][ T5157] PC is at parport_attach+0x174/0x1d0 [ 233.833953][ T5157] LR is at parport_attach+0x164/0x1d0 [ 233.834137][ T5157] pc : [<813ac7d0>] lr : [<813ac7c0>] psr: 60000013 [ 233.834319][ T5157] sp : dfdadd30 ip : dfdadd30 fp : dfdadd54 [ 233.834469][ T5157] r10: 82b16f40 r9 : 00000003 r8 : 840fb540 [ 233.834618][ T5157] r7 : dfdadd90 r6 : 840fb540 r5 : 00000000 r4 : 00000000 [ 233.834806][ T5157] r3 : fee02f00 r2 : 81e15644 r1 : 00000001 r0 : 813ac440 [ 233.835048][ T5157] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 233.835421][ T5157] Control: 30c5387d Table: 85ae1780 DAC: 00000000 [ 233.835722][ T5157] Register r0 information: non-slab/vmalloc memory [ 233.836370][ T5157] Register r1 information: non-paged memory [ 233.836592][ T5157] Register r2 information: non-slab/vmalloc memory [ 233.836888][ T5157] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 233.837384][ T5157] Register r4 information: NULL pointer [ 233.837584][ T5157] Register r5 information: NULL pointer [ 233.837796][ T5157] Register r6 information: slab kmalloc-192 start 840fb540 pointer offset 0 size 192 [ 233.838684][ T5157] Register r7 information: 2-page vmalloc region starting at 0xdfdac000 allocated at kernel_clone+0xac/0x3ec [ 233.839241][ T5157] Register r8 information: slab kmalloc-192 start 840fb540 pointer offset 0 size 192 SYZFAIL: failed to recv rpc [ 233.839692][ T5157] Register r9 information: non-paged memory [ 233.840385][ T5157] Register r10 information: non-slab/vmalloc memory [ 233.840863][ T5157] Register r11 information: 2-page vmalloc region starting at 0xdfdac000 allocated at kernel_clone+0xac/0x3ec [ 233.841434][ T5157] Register r12 information: 2-page vmalloc region starting at 0xdfdac000 allocated at kernel_clone+0xac/0x3ec [ 233.842166][ T5157] Process syz.0.140 (pid: 5157, stack limit = 0xdfdac000) [ 233.842622][ T5157] Stack: (0xdfdadd30 to 0xdfdae000) [ 233.843101][ T5157] dd20: 823fef98 840fb540 829cf9ec 829cf9ec [ 233.843481][ T5157] dd40: 81e15b04 840fb584 dfdadd8c dfdadd58 813a8868 813ac668 20000300 00000000 [ 233.843837][ T5157] dd60: dfdadd7c 20000300 840fb540 b5403587 20000300 84168000 40946400 00000001 [ 233.844231][ T5157] dd80: dfdade4c dfdadd90 813a43b4 813a876c 656d6f63 705f6964 6f707261 00007472 [ 233.844580][ T5157] dda0: 00000000 00002f00 00000005 0000d09a ffffffff 00000003 fffffffe 20000004 [ 233.845023][ T5157] ddc0: 00000003 00000ffe 7fffffff 0000000c 00000002 00000004 00000008 0000ffff [ 233.845407][ T5157] dde0: 00000006 00000005 000007ff 00000830 00000008 00010000 00000009 00000800 [ 233.845701][ T5157] de00: 00000101 00000002 00008001 00000007 00000003 00000004 0000000a 0000070f [ 233.846004][ T5157] de20: 00000000 df93f53d 00000000 8595f480 840fb540 20000300 20000300 84168000 [ 233.846235][ T5157] de40: dfdadf14 dfdade50 813a5380 813a42c0 00000000 00000000 00000000 df93f53d [ 233.846436][ T5157] de60: 00000000 00000000 8247154c 0000005f 8405de58 840fb570 841424d4 84168000 [ 233.846627][ T5157] de80: dfdadee4 dfdade90 80797c9c 8078e000 00000064 00000001 00000000 dfdadeac [ 233.846938][ T5157] dea0: 84dd69d0 834335d8 00006400 0000000b dfdadea0 00000000 00000000 df93f53d [ 233.847143][ T5157] dec0: 8595f480 40946400 20000300 20000300 8595f480 00000003 dfdadef4 dfdadee8 [ 233.847333][ T5157] dee0: 80797dbc df93f53d dfdadf14 40946400 00000000 8595f481 20000300 8595f480 [ 233.847524][ T5157] df00: 00000003 84168000 dfdadfa4 dfdadf18 8056ce9c 813a4db0 ecac8b10 84168000 [ 233.847718][ T5157] df20: dfdadf3c dfdadf30 81a3b058 81a3af28 dfdadf54 dfdadf40 8025e490 8028ef6c [ 233.847908][ T5157] df40: dfdadfb0 40000000 dfdadf84 dfdadf58 802229ec 8025e44c 00000000 8281cddc [ 233.848139][ T5157] df60: dfdadfb0 0014c800 ecac8b10 80222940 00000000 df93f53d dfdadfac 00000000 [ 233.848329][ T5157] df80: 00000000 00306308 00000036 8020029c 84168000 00000036 00000000 dfdadfa8 [ 233.848545][ T5157] dfa0: 80200060 8056cd78 00000000 00000000 00000003 40946400 20000300 00000000 [ 233.848746][ T5157] dfc0: 00000000 00000000 00306308 00000036 002f0000 00000000 00006364 76f6d0bc [ 233.848931][ T5157] dfe0: 76f6cec0 76f6ceb0 0001948c 001322a0 60000010 00000003 00000000 00000000 [ 233.849189][ T5157] Call trace: [ 233.849453][ T5157] [<813ac65c>] (parport_attach) from [<813a8868>] (comedi_device_attach+0x108/0x250) [ 233.849906][ T5157] r6:840fb584 r5:81e15b04 r4:829cf9ec [ 233.850078][ T5157] [<813a8760>] (comedi_device_attach) from [<813a43b4>] (do_devconfig_ioctl+0x100/0x220) [ 233.850543][ T5157] r10:00000001 r9:40946400 r8:84168000 r7:20000300 r6:b5403587 r5:840fb540 [ 233.850852][ T5157] r4:20000300 [ 233.850944][ T5157] [<813a42b4>] (do_devconfig_ioctl) from [<813a5380>] (comedi_unlocked_ioctl+0x5dc/0x1c50) [ 233.851191][ T5157] r8:84168000 r7:20000300 r6:20000300 r5:840fb540 r4:8595f480 [ 233.851413][ T5157] [<813a4da4>] (comedi_unlocked_ioctl) from [<8056ce9c>] (sys_ioctl+0x130/0xba0) [ 233.851911][ T5157] r10:84168000 r9:00000003 r8:8595f480 r7:20000300 r6:8595f481 r5:00000000 [ 233.852630][ T5157] r4:40946400 [ 233.852959][ T5157] [<8056cd6c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 233.853513][ T5157] Exception stack(0xdfdadfa8 to 0xdfdadff0) [ 233.853780][ T5157] dfa0: 00000000 00000000 00000003 40946400 20000300 00000000 [ 233.854193][ T5157] dfc0: 00000000 00000000 00306308 00000036 002f0000 00000000 00006364 76f6d0bc [ 233.854620][ T5157] dfe0: 76f6cec0 76f6ceb0 0001948c 001322a0 [ 233.854970][ T5157] r10:00000036 r9:84168000 r8:8020029c r7:00000036 r6:00306308 r5:00000000 [ 233.855489][ T5157] r4:00000000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.856010][ T5157] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 233.857244][ T5157] ---[ end trace 0000000000000000 ]--- [ 233.857814][ T5157] Kernel panic - not syncing: Fatal exception [ 233.860024][ T5157] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:12:17 Registers: info registers vcpu 0 CPU#0 R00=00000024 R01=767f1008 R02=00040000 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000003 R08=0059dac0 R09=00000000 R10=00000001 R11=7ee642bc R12=00000001 R13=ec3d1ff8 R14=76937590 R15=76937590 PSR=40010093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=82260d04 R01=00000000 R02=00000000 R03=84168000 R04=84168000 R05=82260d04 R06=829fc496 R07=82a78158 R08=00000002 R09=00001425 R10=00000000 R11=dfdadb24 R12=00000000 R13=dfdadac0 R14=81a0de98 R15=8027c98c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000